IBM WebSphere Application Server Apache Struts ClassLoader Manipulation Vulnerability
2015年7月21日
危険度: : 高
CVE識別番号: CVE-2014-0114
概要
The Apache Struts used by the IBM WebSphere Application Server could allow a remote attacker to execute arbitrary code on the system. An attacker could exploit this vulnerability using the class parameter of an ActionForm object to manipulate the ClassLoader and execute arbitrary code on the system.
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.
対応方法
Trend Micro Deep Security DPI Rule Number: 1006015
Trend Micro Deep Security DPI Rule Name: 1006015 - Restrict Apache Struts 'class.classLoader' Request
影響を受けるソフトウェア
- apache struts 1.0
- apache struts 1.0.2
- apache struts 1.1
- apache struts 1.2.2
- apache struts 1.2.4
- apache struts 1.2.6
- apache struts 1.2.7
- apache struts 1.2.8
- apache struts 1.2.9
- apache struts 1.3.10
- apache struts 1.3.5
- apache struts 1.3.8